unwanted software on hard drive

[Hank]

I was given a nice fully functional hard drive out of a used computer by a
fellow employee.
He was exasperated that X-Stop - a web browser filter - and it has a password in
it that he did
not know.

I installed the drive, Windows made the needed hardware and system changes fine.
So I now
have the same problem he did. I have tried to remove it. Delete it in the
registry, then open a dos
box and delete the xstop95.exe - but it still lives. When I stop the program
with the task manager
the system goes all wacky.

I suspect the only way is to boot to a floppy, then navigate to the directory
and delete it there.

Any one here deal with this crappy software?

Thanks,
Hank

[-=ô;ö=-]

I found this tidbit of information via a search at
http://web.textfiles.com/hacking/siteb.txt
I hope this helps....but it looks like a XXX site filter...

[Quote]

--DATE--4-1-98--X STOP-- Here is a letter I recieved about a blocking
program called X Stop.

| Hey there, My friend is having a "problem" with his computer.His
parents | put "X Stop" on his computer.It's one of those block or
filter "bad" | internet sight things.I told him to mail, but
ironically enough,yours is | blocked! Anyways,I've been trying
to help him,but the 2 files | (C:\windows\system\xblock95.dll and
c:\windows\system\xstop95.exe) are | file protected so they cant be
corrupted and what not.If you know anyway | to stop this program
short of formatting could you please tell me?I only | ask you
because I saw that earlier article on how to stop Full Armor or |
something like that.Sorry for the long letter | Cya! C:\>attrib
/? Displays or changes file attributes. ATTRIB [+R | -R] [+A | -A]
[+S | -S] [+H | -H] [[drive:][path]filename] [/S] + Sets an
attribute. - Clears an attribute. R Read-only file attribute. A
Archive file attribute. S System file attribute. H Hidden file
attribute. /S Processes files in all directories in the specified
path. Hello. First let me say that I laughed out loud with that
"ironically enough" story. Okay, onto the question, I have never
encountered this problem, but from your description it should be
fairly easy. Go into MS-DOS and use the attrib command (the help
file above shows the syntax). First do an attrib on those two
files. It will have an R or an A preceeding the files. To make the
files writable or un-archive them simply type: attrib -R
xblock95.dll attrib -R xstop95.exe or attrib -A xblock95.dll attrib
-A xstop95.exe That should make the files manipulative so you can
either corrupt them, or move them. I hope that helps. Hasta!
__________________________________________________ _______________

[End Quote]

[Hank]

> -A xstop95.exe That should make the files manipulative so you can
> either corrupt them, or move them. I hope that helps. Hasta!

Tried it, no help.

[Anonymous]

In article <Tyzrb.19240$xw3.4534@newssvr33.news.prodigy.com >
"Hank" <hank@arlen.com> wrote:
>
> I was given a nice fully functional hard drive out of a used computer by a
> fellow employee.
> He was exasperated that X-Stop - a web browser filter - and it has a password in
> it that he did
> not know.
>
> I installed the drive, Windows made the needed hardware and system changes fine.
> So I now
> have the same problem he did. I have tried to remove it. Delete it in the
> registry, then open a dos
> box and delete the xstop95.exe - but it still lives. When I stop the program
> with the task manager
> the system goes all wacky.
>
Try deleting it in DOS itself, not in a "dos box." That won't work
because Windows is still running.

Boot into dos, and then go to the directory and see if you can zap it
that way.

> Thanks,
> Hank

-=-
This message was posted via two or more anonymous remailing services.

[dj_kuitar]

"Hank" <hank@arlen.com> wrote in message news:<Tyzrb.19240$xw3.4534@newssvr33.news.prodigy. com>...
> I was given a nice fully functional hard drive out of a used computer by a
> fellow employee.
> He was exasperated that X-Stop - a web browser filter - and it has a password in
> it that he did
> not know.
>
> I installed the drive, Windows made the needed hardware and system changes fine.
> So I now
> have the same problem he did. I have tried to remove it. Delete it in the
> registry, then open a dos
> box and delete the xstop95.exe - but it still lives. When I stop the program
> with the task manager
> the system goes all wacky.
>
> I suspect the only way is to boot to a floppy, then navigate to the directory
> and delete it there.
>
> Any one here deal with this crappy software?
>
> Thanks,
> Hank

Try this:

%SystemRoot%\System32\restore\rstrui.exe

[Hank]

> Try this:
>
> %SystemRoot%\System32\restore\rstrui.exe

I take it that means restore user interface, right?

Will this mess any settings up?

Thanks,
Hank

[dj_kuitar]

"Hank" <hank@arlen.com> wrote in message news:<SzFrb.27443$5S6.12243@newssvr31.news.prodigy .com>...
> > Try this:
> >
> > %SystemRoot%\System32\restore\rstrui.exe
>
> I take it that means restore user interface, right?
>
> Will this mess any settings up?
>
> Thanks,
> Hank

I'm guessing you have windows xp. If so, go to
Start/Programs/Accessories/System Tools/System Restore
and try restoring the system to an earlier time that hopefully won't
have the unwanted software installed.

System restore will reset the system state, ie: registry settings,
installed software, but not email and documents. But it will restore
your WinMx download directory if you have one, so you could lose
downloads. A system restore can be undone if you don't like it.

[jayjwa]

You got to get out of Windows entirely, if attrib doesn't work. Windows
protects itself and the programs Micro$oft deems "legit" (like IE). Boot
from a NON-WINDOWS floppy (OLD Ms-Dos, Linux, etc) and blast it out
like that. Since Windows ain't loaded, it can't do diddly-squat about
what you want to delete, even if you wanted to kill the entire HD with
one shot. If you don't have one of these disks, look on the internet. I
know Linux boot disks are at any Linux distro site (Linux can read
Windoze stuff) and I think I have a dos boot disk image on my ftp
server, but chances are you have one of these. Mind you, not simply
booting an older Windows in command line "DOS" mode, but an actual
MS-DOS disk or another OS's disk.
I had to do that to get Internet Explorer off my machine, because
Windows wouldn't let me kill it. It worked so well that I went back and
deleted the rest of Windows. Now my computer is fine and never does
anything against me. (Like it shouldn't)



-=-=-=-=-=-=-=-=-=Atr2-WBS @ Atr2.Ath.Cx=-=-=-=-=-=-=-=-=-
[jayjwa] Mod_SSL / GPG / OpenSSL
"Save the 'Net, Unplug a Windows machine today!"
Was I helpful? https://atr2.ath.cx/affero.php
Contact: https://atr2.ath.cx/cgi-bin/ping-jay.cgi
The DL: https://atr2.ath.cx/who-we-are.html
Cheating the system: https://atr2.ath.cx/pub/restarts.mp3
=-=-=Linux Tough.Powered By Slackware=-=HTTPS/FTP=-RLF#37=